homeassistant-stubs (2022.10.0b2), pytest-homeassistant-custom-component (0.12.0) potentially affected by CVE-2026-54317 via homeassistant (2022.10.0b2)

homeassistant PYPI version 2022.10.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.0b2 - pytest-homeassistant-custom-component 0.12.0 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2021.12.6), pytest-homeassistant-custom-component (0.5.10) potentially affected by CVE-2026-54317 via homeassistant (2021.12.6)

homeassistant PYPI version 2021.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.6 - pytest-homeassistant-custom-component 0.5.10 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2023.5.0b8), pytest-homeassistant-custom-component (0.13.27) potentially affected by CVE-2026-54317 via homeassistant (2023.5.0b8)

homeassistant PYPI version 2023.5.0b8 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.0b8 - pytest-homeassistant-custom-component 0.13.27 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.4.0b4), pytest-homeassistant-custom-component (0.8.4) potentially affected by CVE-2026-54317 via homeassistant (2022.4.0b4)

homeassistant PYPI version 2022.4.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b4 - pytest-homeassistant-custom-component 0.8.4 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.6.0), pytest-homeassistant-custom-component (0.9.10) potentially affected by CVE-2026-54317 via homeassistant (2022.6.0)

homeassistant PYPI version 2022.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.0 - pytest-homeassistant-custom-component 0.9.10 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.9.0), pytest-homeassistant-custom-component (0.11.19) potentially affected by CVE-2026-54317 via homeassistant (2022.9.0)

homeassistant PYPI version 2022.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0 - pytest-homeassistant-custom-component 0.11.19 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.3.5), pytest-homeassistant-custom-component (0.7.4) potentially affected by CVE-2026-54317 via homeassistant (2022.3.5)

homeassistant PYPI version 2022.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.5 - pytest-homeassistant-custom-component 0.7.4 Source cves: CVE-2026-54317 Source advisory:...

Exploit for Code Injection in Langflow

CVE-2026-33017 — Langflow Unauthenticated Remote Code Executio...

📄 Langflow 1.8.1 Remote Code Execution

This Python script is a multi-threaded tool targeting a suspected vulnerability in Langflow versions 1.8.1 and below that allows unauthenticated remote code execution through unsafe execution of CustomComponent code during flow compilation...

Malicious code in sample-custom-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade5f035c4d3f9fe74cfc0626c8ac011eeea6e88040376a03abee9cdf05290b7 The package sample-custom-component was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1032 Malicious code in sample-custom-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade5f035c4d3f9fe74cfc0626c8ac011eeea6e88040376a03abee9cdf05290b7 The package sample-custom-component was found to contain malicious code. Source: ghsa-malware...

CVE-2026-0769

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

Eval Injection

Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Eval Injection via the evalcustomcomponentcode function. An attacker can execute arbitrary code by supplying a crafted string that is evaluated without proper validation...

Eval Injection

Overview lfx is a lfx is a command-line tool for running Langflow workflows. It provides two main commands: serve and run. Affected versions of this package are vulnerable to Eval Injection via the evalcustomcomponentcode function. An attacker can execute arbitrary code by supplying a crafted...

CVE-2026-0769 Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-0769

The Langflow framework is vulnerable to an Eval Injection Remote Code Execution vulnerability in the eval_custom_component_code function. The flaw stems from a lack of proper validation of user-supplied strings before they are used to execute Python code. Attackers can leverage this to execute ar...

Langflow security vulnerabilities

Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications. Langflow has a security vulnerability, which stems from the lack of validation for strings provided by users in the implementation of the evalcustomcomponentcode function. This...

(0Day) Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of evalcustomcomponentcode function. The issue results from the lack of prop...

PT-2026-1999

Name of the Vulnerable Software and Affected Versions Langflow affected versions not specified Description Remote attackers can execute arbitrary code on affected installations without requiring authentication. The issue stems from a lack of proper validation of a user-supplied string within the...

homeassistant-stubs (2022.12.0), pytest-homeassistant-custom-component (0.12.29) potentially affected by CVE-2025-65713 via homeassistant (2022.12.0)

homeassistant PYPI version 2022.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.0 - pytest-homeassistant-custom-component 0.12.29 Source cves: CVE-2025-65713 Source advisory:...